PC Antivirus 2010

20 August 2009 Rogue 1 Comment

PC Antivirus 2010 or PC Anti-Virus 2010 is a rogue security application that will install itself on computer without user’s consent utilizing a rojan Zlob infection. This rogue program is another variant of rogue software family where Total Security and PC Antispyware 2010 also belong. PC Antivirus 2010 may block the Internet
access on the compromised computer by configuring the proxy settings to resolve to unknown address. This prevents user from visiting legitimate security web sites and averts the download of necessary tool to eliminate PC Antivirus 2010.

PC Antivirus 2010′s presence on computer will produce an extensive fake alert messages attempting to mislead computer users. The rogue software will impersonate Microsoft Windows Security Center to deceive victims that it is part of the operating system. The primary objective is to persuade computer owner to purchase the licensed version of PC Antivirus 2010.

PC Antivirus 2010 is a must-removed program. If you have a symptoms or experiencing any signs of this rogue software on your machine, better do a virus scan immediately. You can also find on this page the recommended PC Antivirus 2010 removal tool. This is made available so that user may successfully get rid of the rogue program including all components and system files.

Screen Shot Images:

Technical Details and Additional Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Characteristics (Analysis)
PC Antivirus 2010 runs on Windows start up by adding the following registry entry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “PC Antispyware 2010″

The registry calls for the main executable file ‘PC_Antivirus2010.exe.’

Malware Behavior
PC Antivirus 2010 fabricates a lot of security alerts and warning messages for deceptive purposes. It also alter various system configuration and registry entries that may cause certain irregularities to the system including browser redirect, blocked Internet access and inaccessible folders.

Added Registry Entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "PC Antispyware 2010" 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC_Antivirus2010
HKEY_LOCAL_MACHINE\SOFTWARE\PC_Antivirus2010
HKEY_CURRENT_USER\Control Panel\don't load "scui.cpl"
HKEY_CURRENT_USER\Control Panel\don't load "wscui.cpl"

Associated Files and Folders:

C:\Program Files\Common Files\dgheytqkk.dat
C:\Program Files\Common Files\sjuywtdb.lib
C:\Program Files\Common Files\opwtydjc._dl
C:\Program Files\Common Files\mkywuido.dat
C:\Program Files\Common Files\sahaso.bat
C:\Program Files\Common Files\zotys.bin
C:\Program Files\PC_Antivirus2010
C:\Program Files\PC_Antivirus2010\AVEngn.dll
C:\Program Files\PC_Antivirus2010\htmlayout.dll
C:\Program Files\PC_Antivirus2010\PC_Antivirus2010.cfg
C:\Program Files\PC_Antivirus2010\PC_Antivirus2010.exe
C:\Program Files\PC_Antivirus2010\pthreadVC2.dll
C:\Program Files\PC_Antivirus2010\Uninstall.exe
C:\Program Files\PC_Antivirus2010\wscui.cpl
C:\Program Files\PC_Antivirus2010\data
C:\Program Files\PC_Antivirus2010\data\daily.cvd
C:\Program Files\PC_Antivirus2010\Microsoft.VC80.CRT
C:\Program Files\PC_Antivirus2010\Microsoft.VC80.CRT\Microsoft.VC80.CRT.manifest
C:\WINDOWS\akudyta.lib
C:\WINDOWS\hoxigawax.inf
C:\WINDOWS\kyci.dl
C:\WINDOWS\nuxojih.scr
C:\WINDOWS\qynomikov.bin
C:\WINDOWS\seni.reg
C:\WINDOWS\yfoneby.db
C:\Documents and Settings\All Users\Application Data\pybisezyr.db
C:\Documents and Settings\All Users\Application Data\ulycozoho._dl
C:\Documents and Settings\All Users\Documents\ekenubes.com
C:\Documents and Settings\All Users\Documents\icosagula.reg
 %UserProfile%\Application Data\jugifyryve.exe
 %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\PC_Antivirus2010.lnk
 %UserProfile%\Cookies\ajeby.reg
 %UserProfile%\Cookies\yqeqaranym.vbs
 %UserProfile%\Cookies\zebav.pif
 %UserProfile%\Desktop\_scui.cpl.txt
 %UserProfile%\Desktop\PC_Antivirus2010.lnk
 %UserProfile%\Local Settings\Application Data\xoqupuwytu._dl
 %UserProfile%\Start Menu\Programs\PC_Antivirus2010
 %UserProfile%\Start Menu\Programs\PC_Antivirus2010\PC_Antivirus2010.lnk
 %UserProfile%\Start Menu\Programs\PC_Antivirus2010\Uninstall.lnk 

1. Kill any running process that belongs to PC Antivirus 2010.
- Press Ctrl+Alt+Del on your keyboard.
- When Windows Task Manager appears, look for the following files and click End Task.
PC_Antivirus2010.exe

2. Delete all registry entries that belong to this malware.
- Press [Windows Key]+R on your keyboard.
- In the 'Open' dialog box, type regedit. This will open registry editor.
- Find and delete the following:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "PC Antispyware 2010"
- Close registry editor. Changes made will be save automatically.

3. Scan the computer with antivirus program.
- Connect to Internet and open your antivirus software. Please Update to obtain the latest database and necessary files.
- Restart the computer in Safe Mode.
- Just before Windows logo begins to load press F8 on your keyboard.
- On Windows Advanced Boot Options, select Safe Mode and press Enter.

4. Delete all files dropped by PC Antivirus 2010.
- While still in Safe Mode, search and delete malicious files. Please refer to 'Associated Files and Folders.'

Automatic Removal of PC Antivirus 2010

In order to completely remove the threat, click here to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected machine.